cloudflare/workers-sdk @cloudflare/runtime-types@0.1.9

on GitHub

Patch Changes

• #16148 57f2a71 Thanks @sx4im! - Use a reserved .invalid domain for runtime type generation

  wrangler types dispatched runtime type generation to http://dummy.com/..., which is a real, publicly registered domain. A misrouted request could download arbitrary web content into the generated .d.ts. The dispatch URL now uses dummy.invalid (RFC 2606), which can never resolve, so such requests fail closed instead.

• Updated dependencies [2d1d563, e6f7663, fe607f9, 8de6b3c, ae29445, cc8e969, 417b186]:

  • miniflare@5.20261006.1-alpha